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[57] ABSTRACT 

An improved system is (disclosed for do wnloadin gryeri- 
^fying,-and/or testing^ftwar ^rom -a~remote-|^gramP 
(merialiilil^^ 

a gas turbine engine. The invention includes a remote 
programmer that communicates with the E.E.C. unit 
through a serial communications link. The E.E.C. unit 
<C receivesthe~communicatj ons -through ^serial~m emory 
that transmits them to a shared memory and on through 
a central processing unit ("CP.U.") to a program mem- 
ory. A redundant control circuit is controlled by the 
remote programmer and directs the E.E.C. unit through 
three operational modes. In a first, or download/verify, 
mode of operation, the E.E.C. unit may receive and 
store a boot program. In a second, or program memory, 
mode, the CP.U. executes the boot program to allow 
the CP.U. to read from and/or write to the program 
memory in response to communications from the serial 
channel. In a third, or normal, mode of operation, the 
CP.U. can only read from the program memory and an 
on-board or host computer ma y re place the remote 
programmer, so that the ^"C'P.U.— e3ce^tj^^oJitwaje 
^stWed-in the programmemory-m-^ 
cations-recli yed^from'the-ho st^computer^to control 
multiple actuators on the engines, but the host computer 
cannot access the E.E.C unit's program memory. 

17 Claims, 2 Drawing Sheets 
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unit's program memory, through the test connector. 

SYSTEM FOR DOWNLOADING SOFTWARE Test connector fixtures, however, expose the E.E.C. 

unit to a static-spark contact hazard. Additionally, such 
This application is a continuation of application Ser. a hardware design poses a substantial security risk, be- 
No. 07/890,776, filed on Jun. 1, 1992, now abandoned. 5 cause valuable programs stored in the program memory 

BACKGROUND OF THE INVENTION ^g^SSS? "* ^ ^ 

The present invention relates to a system for down- A second common E.E.C. unit design utilizes a spe- 

loading software to a control unit by way of a serial cial programming station separate from the unit. It ena- 

communications link. In particular, a software down- 10 bles a technician to remove memory components of the 

loading system is disclosed for use in downloading, unit's program memory for downloading, verifying 

verifying and/or testing software from a remote pro- and/or testing in the special programming station. Al- 
grammer or host computer to an unprogrammed, sealed __tir^ghjio^dditional connector_future is required in the~ 

.electronic engine- control- unit -ona-gas'tobineehgineT unit's container, this method requires that the technician 

It is well known on modern aircraft powered by gas 15 be properly trained to open the unit to remove memory 

turbine engines to control multiple engine functions components, thereby exposing its circuit boards, chips 

through a central, on-board or host computer that com- and other components to possible damage. Addition- 

municates instructions by way of a shielded serial com- ally, such a removable memory component cannot be 

munications link to an electronic engine control volatile, thereby prohibiting utilization of potentially 

("E.E.C.") unit on each engine. The E.E.C. unit, in 20 desireable memory components such as static RAMS, 

turn, transmits signals to a plurality of actuators, Finally, this second design also poses a security risk, 

thereby controlling various engine functions. For exam- because elements of the unit's program memory are 

pie, upon commencing a flight, an aircraft operator removable and transportable. 

manipulates a throttle to increase fuel supply to the gas A third known E.E.C. unit design has resolved some 

turbine engines. The throttle directs the on-board or 25 of the problems associated with the first two designs by 

host computer to communicate a specific fuel-supply utilizing a serial communications channel and a boot 

increase to an E.E.C. unit on each engine. Each E.E.C. program that enables the unit's C.P.U. to download, 

unit then generates a specific electronic signal and trans- verify and/or test software code. This design requires 

mits it to an actuator on a torque motor controlling a that the boot software be resident in a memory compo- 

throttle valve, thereby increasing fuel supply to the 30 nent of the unit prior to downloading, or that a boot 

engine. program is first downloaded to a special memory area 

E.E.C. units are typically microprocessor based, and within the unit, prior to communications with the unit's 

include a data communications link, a central process- program memory by a remote programmer or host 

ing unit ("C.P.U."), a program memory, and at least one computer. Such a design minimizes additional connec- 

in/out ("I/O") port. An E.E.C. unit receives instruc- 35 tor fixtures and allows the E.E.C. unit's container to 

tions in the form of data words from the on-board com- remain sealed during downloading, verifying and/or 

puter, via its data communications link. In response, the testing. However, the design requires additional mem- 

C.P.U. then executes an application code stored in the ory components in the unit to load and/or store the 

program memory, and thereby generates and transmits boot program. 

appropriate signals to the actuators, via an electric cir- 40 Moreover, this design also poses a security risk be- 

cuit affixed to the unit's I/O port. cause the boot program remains in the unit after it is 

Two major factors have influenced design of current programmed. This permits a continual access to the 

EJE.C. unit hardware architecture. The first factor has unit's program memory via its data communications 

been the extremely hostile working environment of a link. 

typical aircraft E,E,C. unit adjacent a gas turbine en- 45 Consequently, due to inherent design limitations, 
gine. Virtually all such components are exposed to ex- known E.E.C. units are exposed to severe static spark 
tremes of heat, moisture and vibration, as well as to hazards during ordinary usage; require partial disassem- 
severe static electricity hazards. Consequently, design bly by highly skilled technicians for downloading, veri- 
of E.E.C. units has tended to produce tightly sealed fying and/or testing software; or, require special mem- 
containers housing the units components, wherein the 50 ory areas within the unit for boot software. Addition- 
containers have a minimum number of potential electri- ally, all known E.E.C. unit designs pose security risks 
cal contact points. The second factor influencing design because their program memories are accessible via their 
has been a need to frequently change programs stored in data communication links during ordinary usage. 
EJE.C. units' program memories, and to verify and test Accordingly, it is a general object of the present 
resident programs. Therefore, current E.E.C. units are 55 invention to provide a system for downloading soft- 
designed to be tested and/or modified prior to and be- ware into an E.E.C. unit that overcomes the problems 
tween flights by a technician using a "remote program- of the prior art. 

mer" in place of the host computer. It is a more specific object to provide a system for 
Known E.E.C. units have utilized at least three dis- downloading software into an E.E.C. unit that utilizes a 
tinct hardware-architecture designs to resolve problems 60 minimum number of electrical connector fixtures within 
arising from inherent tensions between the aforesaid a container housing components of the unit, 
two design influences. A first design enables the E.E.C. It is another object to provide a system for download- 
unit to remain sealed during downloading, verifying ing software into an E.E.C. unit that enables the soft- 
and/or testing by having a test-connector fixture in the ware in the unit to be changed, verified and/or tested 
container housing the unit, in addition to the unit's data 65 without opening the container housing components of 
communications link and I/O ports. Such a test connec- the unit, or removing any of the components, 
tor is utilized for on-board programming of the unit, and It is yet another object to provide a system for down- 
also enables a technician to have direct access to the loading software into an E.E.C. unit that prohibits ac- 
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cess to software loaded into the unit's program memory E.E.C. unit's normal mode of operation, software 

during ordinary usage of the unit. stored in the program memory is inaccessible by the 

The above and other objects and advantages of this host computer for two separate reasons. First, the boot 

invention will become more readily apparent when the program is no longer resident in the volatile shared 

following description is read in conjunction with the 5 memory, and second, the control circuit has limited the 

accompanying drawings. C.P.U. so that it can only read from the program mem- 

SUMMARY OF THE INVENTION ory " 

A system is disclosed for downloading, verifying BRIEF DESCRIPTION OF THE DRAWINGS 
and/or testing software from a remote programmer or 10 FIG. 1 is a schematic representation showing an 
host computer to an unprogrammed, sealed Electronic Electronic Engine Control ("E.E.G'*) unit and a plural- 
Engine Control ("E.E.C.") unit on a gas turbine engine. ity of actuators in their ordinary working environment 

Software stored in a program memory of an E.E.C. unit affixed to a gas turbine engine; 

is e^cuted_by_ the_- unit's central -processing-unit FIG: 2 is a^fiematicTepresentation of a system for 

("C.P.U") in response to communications from an on- 15 downloading software of the present invention, show- 
board, or host computer, to control multiple actuators ing the system in a first, or download/verify, mode of 
on the engine, thereby controlling the engine. operation; 

In the preferred embodiment, the invention com- FIG. 3 is a schematic representation of the FIG. 2 
prises an E.E.C. unit cxjntaining a serial channel that system for downloading software, showing the system 
receives information from a data communications link; a 20 in a second, or program software, mode of operation; 
volatile shared memory that communicates with both and 

the serial channel and a C.P.U.; a program memory in FIG. 4 is a schematic representation of the FIG. 2 
communication with only the C.P.U.; at least one in/out system for downloading software, showing the system 
("I/O") port that transfers instructions from the C.P.U. in a third, or normal, mode of operation, 
out of the unit to at least one actuator; a redundant 25 

control circuit that governs operational modes of the DETAILED DESCRIPTION OF THE 

unit; a remote programmer that directs the redundant PREFERRED EMBODIMENT 

control circuit, and downloads, verifies and/or tests Referring to the drawings in detail, the preferred 
software in the unit via the data communications link; embodiment of a system for downloading software of 
and a host computer that replaces the remote program- 30 the present invention is shown in schematic representa- 
mer and communicates with the E.E.C. unit during the tion in FIGS. 2-4, and generally designated by the nu- 
unit's normal mode of operation. meral 10. FIG. 1 shows a typical working environment 

In a first, or download/verify, operational mode, a for a major component of the system 10, its Electronic 
technician operating the remote programmer directs the Engine Control ("E.E.C.") unit 12. The E.E.C. 12 is 
redundant control circuit to place the C.P.U. in an idle 35 shown affixed within a fan stage 14 of a gas turbine 
format. The remote programmer can then download engine 16, wherein the unit 12 has a standard electric 
boot program software code to the serial channel by wire 18 leading to a plurality of actuators 20A-D af- 
way of the unit's data communication link. The serial fixed to the engine 16, so that the actuators control 
channel receives the incoming code as serial data multiple engine functions. 

words, and automatically stores the code in specified 40 As best shown in FIGS. 2-4, the system for down- 
locations in the shared memory. At that point, the re- loading software includes a remote programmer 22 
mote programmer could optionally request the serial (FIGS. 2, 3) and a host computer 24 (FIG. 4), both of 
channel to transmit received data back to the remote which communicate at different times with a serial 
programmer to verify proper transmission and/or stor- channel 26 within the E.E.C. unit 12. The serial channel 
a g e - 45 26, in turn, communicates through a shared memory 28, 

The remote programmer then directs the control and central processing unit ("C.P.U.") 30 to a program 
circuit to place the E.E.C. unit in a second, or program memory 32, all of which are within the E.E.C. unit 12. 
software, operational mode, by releasing the C.P.U. The C.P.U. transmits control signals out of the unit 12 
from the idle format. The C.P.U. then executes code via an in/out ("I/O") port 34. 

from the specified location in the shared memory space 50 A typical remote programmer 22 that could be used 
that received the boot program from the serial channel. in the present invention is a Digital Equipment Corpo- 
The boot program provides a user defined systems pro- ration VAX (manufactured by Digital Equipment Cor- 
tocol that the C.P.U. executes, thereby allowing the poration, of Maynard, Mass. 01754) with a RS232 serial 
C.P.U. to communicate with the remote programmer. connection to a Military Standard 1553 piece of test 
The remote programmer can then communicate with 55 equipment, such as a Loral SSA-100 with MUX I/O 
the C.P.U. by sending or receiving a series of com- card (manufactured by Loral Instrumentation of San 
mands and data words specified in the user defined Diego, Calif. 92123-1720.) The Loral provides Military 
protocol. The commands would request the C.P.U. to Standard 1553B Bus Controller functions and can be 
either store or retrieve code in the program memory, controlled remotely with a standard "personal com- 
thereby downloading, verifying and/or testing software 60 puter" having a serial interface, wherein the 1553B Bus 
in the program memory. Controller could be a card in the personal computer. 

The remote programmer then directs the control "Military Standard 1553B" protocol details are avail- 
circuit to place the E.E.C. unit in a third, or normal, able from the Aeronautical Systems Division, Wright 
operational mode, wherein the C.P.U. controls the se- Patterson Air Force Base, Dayton, Ohio 45433. 
rial channel, but cannot write to the program memory. 65 Similarly, the host computer 24 could be a standard 
A host computer then replaces the remote programmer airframe or engine control computer (manufactured by 
and communicates through the serial channel and Hamilton Standard, of Windsor Locks, Conn. 06096), 
shared memory to the C.P.U. Consequently, in the having a Military Standard 1553B Bus Controller (man- 
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ufactured by United Technologies Microelectronics (not shown) to connect the remote programmer 22 to 
Center ("UTMC"), of Colorado Springs, Colo. the serial channel 26 within the E.E.C. unit 12. As 
80907-3486). The Bus Controller is implemented in a shown in FIG. 2, the remote programmer then ties the 
semi-custom gate array, such as Part No. UT1553B first, second, and third control circuits 36, 38, 40 to 
BCRT (manufactured by UTMC, of Colorado Springs, 5 grounds, placing the system 10 in the first, or down- 
Colo. 80907-3486). load/verify, mode of operation, wherein the serial chan- 
The E.E.C. unit 12 also includes the serial channel 26, nel 26 runs automatically; the shared memory 28 is 
such as 1553 Remote Terminal that is implemented in a written and/or read by the serial channel 26; and, the 
semi-custom gate array; for example, Part No. CP.U. 30 is idle. 

UT1553B RTI-1 (manufactured by UTMC, of Colo- 10 The remote programmer 22 then downloads a stan- 

rado Springs, Colo. 80907-3486). The serial channel 26 dard boot program software code to the serial channel 

receives communications from either the remote pro- 26 which automatically stores the boot program sequen- 

grammer 22, or the host computer 24. Another compo- tially at specified tocatfonsjn Jhe_shared-memory-28; 

^enU)^e_E.EX^nit_12 isthe shared-memory 28rsuch T3ie~rembte~~programmer 22 could optionally verify 

as a 8192 by 8 BIT random access static memory 15 proper transmission and storage of the boot program in 

("SRAM"). An example of such a SRAM is Part No. the shared memory 28, by requesting the serial channel 

IDT7164, manufactured by Integrated Device Tech- 26 to read and transmit the data received and stored in 

nology, of Santa Clara, Calif. 95054. the shared memory 28 back to the remote programmer 

The shared memory 28, or SRAM, communicates 22. 
within the E:E.C. unit 12 with either the serial channel 20 Next, the remote programmer 22 is set to apply a 
26, or the CP.U. 30, which could be a standard micro- voltage to the third control circuit 40, as shown in FIG. 
processor, such as a 16 BIT internal by 8 BIT external 3, placing the system 10 in the second, or program soft- 
microprocessor, implemented by a semi-custom gate ware, mode of operation. In that mode, the CP.U. 30 is 
array, including the 1553 Remote Terminal noted released from idle and automatically executes the boot 
above. For example, in the preferred embodiment, the 25 program code stored in the shared memory 28. The 
Remote Terminal for the serial channel 26 and the mi- boot program enables the CP.U. 30 to read and/or 
coprocessor making up the CP.U. 30 are combined write to the shared memory 28, and read and/or write 
together in a MUXIO gate array, such as Part No. UP4- to the program memory 32. Consequently, the remote 
3AL, manufactured by UTMC, of Colorado Springs, programmer 22 can then communicate with the CP.U. 
Colo. 80907-3486. 30 30 and request that the CP.U. 30 either store data re- 

As shown in FIGS. 2-4, the CP.U. 30 also communi- ceived from the remote programmer 22 by the serial 
cates within the E.E.C. unit 12 with the program mem- channel 26 to specified locations in the program mem- 
ory 32, such as a 32768 by 8 BIT Electrically Erasable ory 32, or retrieve data stored at specified locations in 
Programmable Read Only Memory ("EEPROM"); for the program memory 32, and transmit the data to the 
example, Part No. X28C256, manufactured by XICOR, 35 remote programmer 22, as described schematically in 
Inc., of Milpitas, Calif. 95025, or any standard EE- FIG. 3. 

PROM. Additionally, the CP.U. 30 transmits control Therefore, once the boot program is being executed 

signals to, and receives signals from, standard actuators by the CP.U. 30, the remote programmer has access to 

20A-D via the I/O port 34. the shared memory. 28, CP.U. 30, program memory 32, 

As best seen in FIGS. 2 and 3, a first control circuit 40 and I/O port 34. The remote programmer 22 can then 

36, a second control circuit 38, and a third control cir- download to the E.E.C unit 12 standard application 

cuit 40 comprise standard electrical circuits transmit- and/or operation software and verify and/or test the 

ting varying voltages between the remote programmer software, while the E.E.C unit 12 remains in the pro- 

22 and the CP.U. 30. Operational modes of the E.E.C gram software operational mode, 

unit 12, as described hereinbelow, vary, depending on 45 Next, the E.E.C. 10 is set to apply a voltage to the 

the voltage applied to the first, second, or third control first and second control circuits 36, 38, and the remote 

circuits 36, 38, 40 by a technician (not shown) operating programmer 22 is replaced by the host computer 24, 

the remote programmer 22. Voltage applied by the placing the system 10 in the third, or normal, mode of 

three control circuits 36, 38, 40 actuates three pins on operation. In that mode, the CP.U. 30 controls the 

the CP.U. 30, such as three pins on" the aforesaid 50 serial channel 26; both the CP.U. 30 and the serial 

MUXIO gate array, to enable the CP.U. 30 to operate channel 26 have access to the shared memory 28; and 

in the three operational modes described below. the CP.U. runs from the program memory 32, but can- 

FIG. 2 shows the system for downloading software not write to the program memory, as shown schemati- 

10 in a first, or download/ verify, mode of operation, cally in FIG. 4. Additionally, because the shared mem- 

wherein the first, second, and third control circuits 36, 55 ory 28 is a volatile random access static memory 

38, 40 have each been tied to grounds by a technician ("SRAM"), the boot program previously stored in the 

operating the remote programmer 22. FIG. 3 shows the shared memory 28 is no longer resident in the E.E.C. 

system 10 in a second, or program software, mode of unit 12. Consequently, the program memory 32 cannot 

operation, wherein the first and second control circuits be accessed by the host computer, while the system 10 

36, 38 have been tied to grounds and voltage has been 60 is in the third, or normal, mode of operation, 

applied to the third control circuit 40. FIG. 4 shows the In the normal mode of operation, the CP.U. 30 exe- 

system 10 in a third, or normal, mode of operation, cutes application software stored in the program mem- 

wherein voltage has been applied to the first, second, ory 32 in response to communications received from the 

and third control circuits 36, 38, 40. host computer 24, in order to generate control signals 

In use of the system for downloading software 10, the 65 transmitted to the actuators 20A-D via I/O port 34, 

E.E.C. unit 12 is received from a manufacturer with no thereby controlling the engine 16. 

resident code in any of its memory components. A tech- It should be understood by those skilled in the art that 

nician utilizes a standard serial communications link obvious modifications can be made without departing 
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from the spirit of the invention. For example, the pres- 
ent system for downloading software could be used to 
enhance security of resident software code in micro- 
processor based control units utilized in a variety of 
differing work environments, such as automobiles, copy 5 
machines, and computer terminal systems. Accord- 
ingly, reference should be made primarily to the accom- 
panying claims, rather than the foregoing specification, 
to determine the scope of the invention. 
What is claimed is: 10 

1. A system for downloading software from a remote 
programmer to an Electronic Engine Control 
("E.E.C.") unit comprising: 

a. a serial channel ^within the_E,E.C._unit-that -re 

ceives, communications from and transmits com- 15 

munications to the remote programmer; 

b. a shared memory within the E.E.C. unit that re- 
ceives, stores, and transmits communications from 
the serial channel; 

c. a central processing unit ("C.P.U.") within the 20 
E.E.C. unit that receives, stores, executes, and 
transmits communications from the shared mem- 
ory, and generates control signals for transmission 
out of the E.E.C. unit by way of an in/out port in 
the E.E.C unit; 25 

d. a program memory* within the E.E.C unit that 
receives and stores communications from the 
C.P.U. and transmits communications to the 
CP.U.; and 

e. control circuit means for enabling the remote pro- 30 
grammer to select either: 

i. a first E.E.C unit operating means for operating 
the E.E.C. unit in a first mode of operation, 
wherein the serial channel receives incoming 
code as serial data words and stores the code in 35 
the shared memory; the shared memory is writ- 
ten and/or read by the serial channel; and the 
C.P.U. is idle, so that the remote programmer 
can download a boot program through the serial 
channel for storage in the shared memory, or 40 

ii. a second E.E.C. unit operating means for operat- 
ing the E.E.C unit in a second mode of opera- 
tion, wherein the C.P.U. automatically executes 
code in the shared memory and is enabled to 
read and/or write to the shared memory and 45 
program memory, so that the remote program- 
mer can download software code through the 
serial channel, shared memory, C.P.U. to the 
program memory; or 

iii. a third E.E.C. unit operating means for operat- 50 
ing the E.E.C. unit in a third mode of operation, 
wherein the C.P.U. controls the serial channel; 
the C.P.U. and the serial channel can read and- 
/or write to the shared memory; and, the C.P.U. 
reads from, but cannot write to, the program 55 
memory, so that the C.P.U. can execute software 
code stored in the program memory, and the 
remote programmer cannot access the program 
memory. 

2. The system for downloading software of claim 1, 60 
further comprising a host computer means for replacing 
the remote programmer in said third mode of operation 
•of the E.E.C. unit, so that the host computer transmits 
communications through the serial channel and shared 
memory to the C.P.U., and the host computer cannot 65 
access the program memory. 

3. The system for downloading software of claim 2, 
wherein the control circuit means includes a plurality of 



the 



8 

remote 



programmer and the 



circuits between 
E.E.C. unit 

4. The system for downloading software of claim 3, 
wherein the shared memory comprises a random access 
shared memory. 

5. The system for downloading software of claim 4, 
wherein the program memory comprises an electrically 
erasable, programmable read only memory. 

6. The system for downloading software of claim 5, 
wherein the CP.U. is adapted to not transmit the boot 
program from the shared memory to the program mem- 
ory, so that the boot program is erased from the shared 
jnemory_when_the_host-computer replaces the'remote - 
programmer. 

7. In a system for downloading software from a re- 
mote programmer to an Electronic Engine Control 
("E.E.C") unit having a serial channel within the 
E.E.C. unit that receives communications from and 
transmits communications to the remote programmer; a 
central processing unit ("C.P.U.") within the E.E.C. 
unit that receives, stores, executes, and transmits com- 
munications from the serial channel, and generates con- 
trol signals for transmission out of the E.E.C. unit by 
way of an in/out port; a shared memory within the 
E.E.C. unit that stores and transmits communications 
received from the serial channel or C.P.U.; a method of 
controlling the E.E.C. unit from the remote program- 
mer comprising the steps of: 

a. operating a control circuit to place the E.E.C. unit 
in a first mode of operation, wherein the serial 
channel receives incoming code as serial data 
words and stores the code in the shared memory; 
the shared memory is written and/or read by the 
serial channel; and the C.P.U. is idle, so that the 
remote programmer can download a boot program 
through the serial channel for storage in the shared 
memory; 

b. operating a control circuit to place the E.E.C. unit 
in a second mode of operation, wherein the C.P.U. 
automatically executes code in the shared memory 
and is enabled to read and/or write to the shared 
memory and program memory so that the remote 
programmer can download software code through 
the serial channel, shared memory, C.P.U. to the 
program memory; 

c. operating a control circuit to place the E.E.C. unit 
in a third mode of operation, wherein the C.P.U. 
runs the serial channel; the C.P.U. and the serial 
channel can read and/or write to the shared mem- 
ory; and the C.P.U. reads from, but cannot write 
to, the program memory so that the C.P.U. can 
execute software code stored in the program mem- 
ory, and the remote programmer cannot access the 
program memory. 

8. The method of controlling the E.E.C unit of claim 

7, including the further step of replacing the remote 
programmer with a host computer in said third mode of 
operation of the E.E.C. unit so that the host computer 
transmits communications through the serial channel 
and shared memory to the C.P.U., and the host com- 
puter cannot access the program memory. 

9. The method of controlling the E.E.C. unit of claim 

8, including the further step of erasing the boot program 
stored in the shared memory after the E.E.C. unit is 
placed in said third mode of operation so that the boot 
program is no longer resident in the E.E.C. unit 
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10. A system for downloading software from a re- hi. a third mode of operation, wherein the CP.U. 

mote programmer to an Electronic Engine Control controls the serial channel, the CP.U. and the 

("E.E.C") unit comprising: serial channel can read and/or write to the 

a. a serial channel within the E.E.C. unit that re- shared memory; and, the CP.U. reads from, but 
ceives, communications from and transmits com- 5 cannot write to, the program memory, so that 
munications to the remote programmer; ^ CP.U. can execute software code stored in 

b. a shared memory within the E.E.C. unit that re- the Ptt&z™ memory, and the remote program- 
ed ves, stores, and transmits communications from „ J? er canno * access the P r °g ram memory. 

the serial channel- e svstem * or downloading software of claim 10, 

c. a central processing unit ("CP.U.") within the 10 ^T*' the mode of operation, the three C P.U. 

EEC unit that receives stare*, execute ahH pmS haVe been tied t0 S rounds b V * e second 

t.t,c. unit mat receives, stores, executes, and third control circuits. 

transmits communications from the shared mem- 12. The system for downloading.software of claim-10 ( - 

_ory, and generaites^ wh^rein^n ifiTsSirid^Ste of operation, two CP.U. 

- ourof the E.E.C unit by way of an in/out port m 15 pins have been tied to * grounds by the flfst md secQnd 

the E.E.C. unit; control circuits, and a voltage has been applied to a 

d. a program memory within the E.E.C unit that third CP.U. pin by the third control circuit, 
receives and stores communications from the 13. The system for downloading software of claim 10, 
CP.U. and transmits communications to the wherein, in the third mode of operation, a voltage has 
CP.U.; and 20 been applied to the three CP.U. pins by the first, second 

e. a first control circuit, a second control circuit and and third control circuits. 

a third control circuit that transmit varying volt- 14. The system for downloading software of claim 10, 

ages between the remote programmer and three further comprising a host computer for replacing the 

separate pins on the CP.U. for operating the remote programmer in the third mode of operation of 

E.E.C unit in: 25 the E.E.C unit, so that the host computer transmits 

i. a first mode of operation, wherein the serial chan- communications through the serial channel and shared 

nel receives incoming code as serial data words memory to the CP.U., and the host computer cannot 

and stores the code in the shared memory; the access ^ P ro S ram memory. 

shared memory is written and/or read by the 15 ^ system for downloading software of claim 10, 

serial channel; and the CP.U. is idle, so that the 30 ^ he ": m the shared memorv comprises a random access 

remote programmer can download a boot pro- S ^ e " iemor y- 

gram through the serial channel for storage in J* ™ downloadui S Software of <T lai + m 10 ' 

°v cW/ . , _ 6 wherein the program memory comprises an electroni- 

» f t^fr^ 7' *> l , d y t cally erasable, programmable read only memory. 

n. a second mode of operation, wherem the CP.U. 35 17 f * r downloading software of cl y aim 10 , 

automatically executes code m the shared mem- wherein the CRTJ . does not transmit the boot 
ory and is enabled to read and/or write to the from the shared mem ory to the program memory and 
shared memory and program memory, so that the boot program memory is erased from the shared 
the remote programmer can download software memory when the E.E.C unit is in the third mode of 
code through the serial channel, shared memory, 40 operation. 

CP.U. to the program memory; or ***** 
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